Imposter scams hit $3.5B in 2025, FTC reports

Imposter scams cost Americans $3.5 billion in 2025, the Federal Trade Commission reports.

New data from the FTC show that fraud losses are not just rising, they are shifting. In 2025, people reported losses tied to impersonation scams, where scammers pose as banks, government agencies, or known businesses, accounting for nearly one in three fraud reports and totaling a staggering $3.5 billion. The losses have nearly tripled since 2020, underscoring how quickly scammers have diversified their playbook across channels. The figures also sit inside a broader, record year for fraud, with consumers reporting about $16 billion in total losses in 2025, roughly 25 percent higher than 2024.

The impersonation surge is not a monolith. Bank impersonations dominate the landscape in dollar terms, often beginning with a convincing fake security alert that urges the target to move funds to "protect" them. The scam exploits legitimate fears about protection and compliance, leveraging urgency to bypass rational checks. Beyond banks, impersonators posing as government entities claimed nearly $920 million in losses in 2025, up from $789 million the year before, while "business impersonators" drew close to $1 billion in reported losses. The FTC notes that this multichannel approach reaches people through text messages, phone calls, emails, social media, and even search results, illustrating how a single fraud vector can cascade into many touchpoints.

The numbers come with a somber reminder from FTC officials: fraud undermines market efficiency by eroding trust and distorting consumer decisions. The agency highlights the fact that impersonation scams are among the most pernicious because they exploit legitimate institutions. The data align with broader enforcement and consumer protection efforts, including ongoing coordination with the Elder Justice Coordinating Council to raise awareness of scams affecting older adults and to tailor outreach to more vulnerable populations.

For compliance teams and platform operators, the report signals several immediate priorities. First, multi-channel risk controls must be tightened. If a text or incoming call claims to be a bank alert, the default workflow should require independent verification steps before moving money, ideally using out-of-band confirmations that an attacker cannot spoof. Second, education and clear signaling matter; consumers need accessible, timely indicators that distinguish legitimate alerts from counterfeit ones. Third, transfer friction is not a flaw when the stakes are high; well-timed lulls in authorization flow can prevent impulsive transfers prompted by fear or urgency. Finally, monitoring must be continuous, with real-time anomaly detection across channels to flag unusual requests before funds are moved.

The FTC frames this as not just a consumer issue but a systemic risk that requires a mix of enforcement and market remedies. The agency says it will deploy every available tool to curb impersonation, including strengthening platform accountability for misuse of communication channels and supporting targeted public education campaigns. For technology leaders, the takeaway is clear: embed stronger identity verification cues in customer journeys, invest in fraud analytics that span SMS, voice, and social channels, and ensure incident response playbooks align with high-risk transfer scenarios. For compliance officers, it means coupling robust controls with user education and transparent reporting of suspicious activity to preserve trust in payments and digital services.

What comes next is as important as what happened. Expect tighter collaboration between regulators, financial institutions, and platform operators to sharpen the signals that separate legitimate alerts from phish and impersonation attempts. Watch for policy pushes around stronger verification protocols and more prescriptive consumer protections aimed at slowing down high-risk transfers without creating excessive friction for legitimate customers.

Sources